This Week's Project Spotlight 🦀

datafusion

DataFusion is an extensible query engine written in Rust that uses Apache Arrow as its in-memory format.

#rustlang #rust

RT @TheRegister: Nach der Neuschreibung von SQLite in Rust richtet Turso seinen Fokus auf Postgres. Das Cloud-Datenbank-Start-up möchte mit einem einzigen virtuellen Maschinenkern mehrere SQL-Frontends betreiben.

mehr auf Arint.info

#CloudDatabase #Postgres #Rust #SQL #Turso #arint_info

https://x.com/TheRegister/status/2082428467958940149#m

Automate Gmail and Microsoft emails – directly from the shell

Gmail REST API, Microsoft Graph, and JSON Schema: Himalaya 2.0 further focuses the mail CLI on automation.

https://www.heise.de/en/news/Automate-Gmail-and-Microsoft-emails-directly-from-the-shell-11383439.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#API #EMail #GoogleMail #IMAP #IT #Microsoft #MicrosoftOutlook #OpenSource #Rust #news

Gmail und Microsoft-Mails automatisieren – direkt aus der Shell

Gmail REST API, Microsoft Graph und JSON Schema: Himalaya 2.0 richtet die Mail-CLI stärker auf Automatisierung aus.

https://www.heise.de/news/Gmail-und-Microsoft-Mails-automatisieren-direkt-aus-der-Shell-11382819.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#API #EMail #GoogleMail #IMAP #IT #Microsoft #MicrosoftOutlook #OpenSource #Rust #news

Safety in an unsafe world https://lobste.rs/s/xcrvhr #rust
https://joshlf.com/posts/safety-unsafe-world/

ClickFix Keeps Evolving: Rundll32 Ordinal Execution over WebDAV

A sophisticated ClickFix campaign variant uses social engineering to trick victims into executing commands via the Windows Run dialog. The technique leverages rundll32.exe to load remote non-DLL payloads by ordinal export #1 over WebDAV connections tunneled through HTTPS port 443. Multiple incidents at a single organization show evolving obfuscation methods including WMI process spawning, caret insertion, and runtime string assembly to evade detection. The attack chain utilizes trusted Windows binaries like pcalua.exe to break process lineage tracking. No files are dropped to disk, and payloads are invoked by ordinal rather than named functions. Successful attacks exfiltrated browser credentials and sensitive documents totaling 13MB. The most obfuscated variant evaded automated EDR detection entirely, being discovered only through proactive threat hunting focused on ordinal execution patterns rather than keyword detection.

Pulse ID: 6a696c957b6f57a0709333e4
Pulse Link: https://otx.alienvault.com/pulse/6a696c957b6f57a0709333e4
Pulse Author: AlienVault
Created: 2026-07-29 02:59:33

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberSecurity #EDR #HTTP #HTTPS #InfoSec #LUA #OTX #OpenThreatExchange #RAT #Rust #SocialEngineering #Windows #Word #bot #AlienVault

I am working on a writing tool. imagine Scrivener and Obsidian having a baby. Written in rust.
Not using electron, but egui. Manuscript locally in markdown. Would you be interested in being an alpha tester? Windows, Mac and Linux targeted.

Also:

- Support for Lisa Crons story cards
- Wikilinks and backlinks like in Obsidian
- Integrated Pomodoro timer

License is currently undecided, but probably a combination of open source and a proprietary 'plus' version.

Please boost or quote for reach

#obsidian #obsidianmd #rust #scrivener

We just merged the fourth (big) rustdoc perf improvement in a row. Here are the PRs with their numbers:

• https://github.com/rust-lang/rust/pull/159854: up to -39.9%
• https://github.com/rust-lang/rust/pull/159779: up to -19.1%
• https://github.com/rust-lang/rust/pull/159721: up to -28.4%
• https://github.com/rust-lang/rust/pull/159623: up to -31.4%

And all of that because someone encountered a weird bug when using rustdoc. \o/

#rust #rustlang

#RicochetRefresh and #Arti build on #Fedora Atomic #OS.
#rustlang environment is also functional in #rpm #ostree.
(#immutability over sandboxing if not live?)
#FreedomOfThePress #Journalism #ComputerScience #Linux @freedomofpress @torproject

jk, Rotational #HDD and #Rust work together just fine.
Anomalies and vulns in #QubesOS . . .
#console #hacking #rpc #Wayland #fastly @rust

Foreign Sources as attack vector
http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Install_Software#Foreign_Sources
also → APT::KashGrow “true”;

What other flaws might lie in confidential computing core trust mechanisms?
https://www.theregister.com/security/2026/07/04/confidential-computings-trust-mechanism-is-broken-the-fix-may-not-exist/5266056
@QubesOS @whonix
#attestation #TLS
@rfceditor #GOS

also, in case you didn't know,
rpm-ostree kargs --append=
is really great
and rpm-ostress works over torsocks, atomic just doesn't like systemd so run 'tor' manually

#Karg #Kernel

Parallel JSON parsing on the GPU with compute shaders https://lobste.rs/s/nhixqy #rust
https://github.com/friendlymatthew/slurpjson#slurpjson

A Citroën car graveyard, once the proud collection of a classic car enthusiast. Now these old-timers rust away on the outskirts of a town in the Midlands of England.

More photos of old overgrown Citroen -
https://www.obsidianurbexphotography.com/other/citroen-graveyard-england/

#Citroen #ClassicCars #Photography #Rust #Lost #England #WeirdCarMastodon

Alt...

A vintage black Citroën DS20 is heavily overgrown by nature in an abandoned car graveyard. Its front is partially obscured by foliage.

Alt...

An abandoned, ivy-covered white and red Citroën 2CV car rests in a lush green car graveyard, blending into nature.

Alt...

An abandoned silver Citroën XM, covered in autumn leaves, rests in an overgrown car graveyard.

Alt...

A weathered red Citroën 2CV, with rust and a missing headlight, sits abandoned amidst overgrown foliage and debris

Expanding the Castle: New Campaigns, New Tooling, and the NeedleStealer Connection

Arctic Wolf Labs has been tracking multiple campaigns built around CastleLoader, a multi-stage shellcode loader that has evolved significantly. Three distinct campaigns were identified: Urutyka, Garrigin, and Noidret. The most significant development is the integration of NeedleStealer framework payloads, marking the first observed use of Rust and Golang tooling in this campaign cluster. NeedleStealer includes a Rust-based desktop cryptocurrency wallet spoofer targeting Ledger, Trezor, and Exodus wallets, and a Golang-based malicious browser extension installer. The campaigns utilize obfuscated PowerShell stagers, IronPython runtimes, and NodeJS-based shellcode injectors. Infrastructure analysis revealed consistent naming patterns, staged domains for future operations, and the use of fraudulently obtained code-signing certificates. The campaigns consistently deploy NetSupport RAT and CastleStealer alongside the new NeedleStealer payloads, suggesting an expansion toward high-value cryptocurrency targeting.

Pulse ID: 6a682376fe6eac7ecb782129
Pulse Link: https://otx.alienvault.com/pulse/6a682376fe6eac7ecb782129
Pulse Author: AlienVault
Created: 2026-07-28 03:35:18

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberSecurity #Edge #Golang #InfoSec #NetSupport #NetSupportRAT #OTX #OpenThreatExchange #PowerShell #Python #RAT #Rust #ShellCode #bot #cryptocurrency #AlienVault

Some #programminglanguages remain widely used for decades, while others fulfill an important role during their time before receding.

Our author Andrew Oram explores the stories of C, C++, C#, #Java, #JavaScript, #PHP, #Rust, #Perl, #COBOL, #FORTRAN, #BASIC and others. Dive into it 👇
https://lpi.org/xq3f

#LPI #programming #opensource #linux #unix #softwaredevelopment #coding #developers #sysadmins #python #softwareengineering

Apache Fory vulnerabilities hit Java, C++, and Rust deserialization, including CVE-2026-64606. Upgrade to Fory 1.4.0 to fix all four flaws.

#ApacheFory #Deserialization #Java #Rust #Cpp #Vulnerability #OpenSource #Cybersecurity

https://securityonline.info/apache-fory-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

How do you rewrite C/C++ projects to Rust?
#RustLang #Rust #RustRover

https://blog.jetbrains.com/rust/2026/07/27/cpp-to-rust-migration/

Ohnoes, #rouille, the French version of the #rust programming language, doesn't have a security.md file

Have these people even read the README.md

Alt...

Email screenshot: "hi benjamin. Saw Rouille (1770 stars). No SECURITY.md yet, which is usually the first thing we ask about."

AWESOME LINKS OF LAST WEEK 🧵

Check thread below 👇

#rustlang #rust

Constructor is hiring Senior Machine Learning Engineer: ML Recall

🔧 #c #cplusplus #python #rust #aws #azure #gcp #mysql #sql #machinelearning #seniorengineer
🌎 Remote; Portugal
⏰ Full-time
🏢 Constructor

Job details https://jobsfordevelopers.com/jobs/senior-machine-learning-engineer-ml-recall-at-constructor-io-aug-8-2025-105d57?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring

Here is a short demo video that showcases what you can do with Feedle. Suppose, you are interested in keeping up-to-date with creators in the #Rust programming community. You can:

1. Search for a topic of interest. You can use boolean operators and other Google-like tricks to fine-tune your query.
2. Grab the topic's #RSS feed and add to your reader.
3. If you have a blog, you can even export an embed that you can then share with your own audience. Plus, don't forget to add your blog to Feedle!

I had a rather big development step forwards today.

Posting text is almost implemented. I had to refactor some stuff and adapt the database layout, but I am almost done with the functionality and tests are also there.

I am looking forward to next week, I guess posting should be ready (for text at least) by the end of next week.

#rust #rustdevelopment

So we are looking for a new teammate.

You like Rust and want no AI mandate? You feel safer around trans people? Then join! You'll be working with me <- (me)

https://www.heliotis.com/en/careers/#offene_stellen

(pls retoot profusely, so that I can get a cool teammate rather than the default techbro)

Don't hesitate to ask follow up questions. My instance has a short character limit.

#Rust #GetFedihired #fedijob #hiring

Himalaya v2.0.0: CLI to manage emails https://lobste.rs/s/sd5em2 #email #release #rust
https://fosstodon.org/@pimalaya/116983467890532240

Memory Safety Absolutists https://lobste.rs/s/x7jtkt #c #rust #zig
https://itsallaboutthebit.com/memory-safety-absolutists/

Feeling stressed? I suggest sitting among rusty objects while listening to the sound of flowing water.

#Iceland #video #landscape #nature #abandoned #decay #rust #stream #water #lake #mountain

Is your company currently hiring for a role that includes using Rust?

Reply with a link to the opening and any relevant context.

If you're not, we'd appreciate a repost for visibility

#rust #rustlang #programming

weblings: Compiling Rust to WASM from inside WASM https://lobste.rs/s/k5ygl4 #compilers #rust
https://github.com/AngelOnFira/weblings

Delightful integration tests in Rust https://lobste.rs/s/khaizc #rust
https://github.com/alexpusch/rust-magic-patterns/blob/master/delightful-integration-tests/Readme.md

Hanging out with the Rust in Production guys in Düsseldorf! 🦀

About to watch some feuerwerk 🎆

@mre @m3t0r

#rust #production #grindwerk

Query cycles: A compiler murder mystery via @hugoarnal https://lobste.rs/s/zobigz #rust
https://ferrous-systems.com/blog/query-cycles-a-compiler-murder-mystery/

msaRAT Ransomware Routes C2 Traffics Through Headless Browsers

Chaos ransomware group uses the Rust-based msaRAT implant to conceal C2
communications through headless Chrome or Edge browsers, Chrome
DevTools Protocol, Cloudflare Workers and WebRTC.

Pulse ID: 6a636223b470c7200c1cfac1
Pulse Link: https://otx.alienvault.com/pulse/6a636223b470c7200c1cfac1
Pulse Author: cryptocti
Created: 2026-07-24 13:01:23

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Chrome #Cloud #CyberSecurity #Edge #ICS #InfoSec #OTX #OpenThreatExchange #RAT #RansomWare #Rust #bot #cryptocti

Another week ends, so it's time for another update on the work on Diesel, a ORM and query builder for Rust.

This week we got 1 new bug report and 4 new PR's.

#rust #rustlang

⚡ #Harper is an offline, privacy-first #grammar checker for developers, written in #Rust and maintained by #Automattic #opensource
It lints a document in milliseconds and uses less than 1/50th of LanguageTool's memory footprint 🧵👇

Improving std::simd::swizzle_dyn https://lobste.rs/s/auk6ft #rust
https://shnatsel.github.io/improving-std-simd-swizzle-dyn/

Meta Garbage Collection: Using OCaml's GC to GC Rust

https://soteria-tools.com/blog/meta-garbage-collection

#meta #rust

For my #bootloader in #rust I wanted an different approach than grub; instead of probing at boot-time, a userspace tool creates an load config (or the user specifies one) which is then baked into the bootloader itself when booting from BIOS.

The sysfs has some interesting quirks! Each device has a folder for related devices, both which they are contained in (slaves) and which they contain (holders). Would named them the opposite, but hey; thats just how the linux sysfs works I guess.

Another is that partitions do have a "slaves" folder but dont use them; you're supposed to just use the parent directory. Except if the partition was discovered via disk mappers (kpartx) - then the parent device does show up in the "slaves" folder!

#lowlevel #rustboot #coding #osdev #programming #linux

Axum Support in RustRover 2026.2: Build Web Backends Faster
#RustLang #Rust #Backend #Features #Rustrover #Axumsupport #Webbackend

https://blog.jetbrains.com/rust/2026/07/23/axum-support-in-rustrover/

Huge perf improvement (up to 34%!) was just merged in rustdoc. Instead of handling trait impls and then filtering them, we now do the opposite.

Nice side-effect: notable traits feature now works even better.

PR and link to the perf report: https://github.com/rust-lang/rust/pull/159623#issuecomment-5047005618

#rust #rustlang

🚀 COSMIC Desktop 1.4 aduce îmbunătățiri majore pentru System Monitor și remediere de bug-uri!

Noul update pentru mediul de desktop creat în Rust de către System76 a fost lansat, punând accent pe controlul proceselor, monitorizarea hardware-ului și optimizarea experienței grafice pe Wayland.

✨ Ce este nou în COSMIC Desktop 1.4:

📊 Aplicația System Monitor actualizată:
• Opțiuni direct din interfață pentru oprirea normală (Quit) sau forțată (Force Quit) a aplicațiilor care nu mai răspund.
• Grafice interschimbabile pentru CPU și GPU, cu vizualizări îmbunătățite.
• Monitorizarea în timp real a frecvenței GPU-ului.

🎮 Compositor și experiență de joc mai bune:
• Reconstruit pentru a rezolva probleme de afișare: jocurile care aveau dificultăți la trecerea în modul fullscreen funcționează acum corect.
• Eliminat efectul de pâlpâire (flickering) la navigarea prin meniurile aplicațiilor tiled.

🖥️ Ajustări pentru Fractional Scaling:
• Precizie sporită a cursorului de la mouse lângă marginile ecranului atunci când este activată scalarea fracționară.
• Corectată grosimea inconstantă a bordurilor de fereastră la scalări non-întregi.

🛠️ Corecții pe întregul sistem:
• Stabilitate crescută în COSMIC Panel și COSMIC Settings (rezolvată o problemă unde schimbarea volumului pentru surse afecta dispozitivele de ieșire).
• Portalul de desktop rulează acum ca serviciu de sistem nativ, având jurnalizare mai clară prin journald.

Pachetele sunt deja disponibile în Pop!_OS 24.04 LTS și urmează să ajungă rapid în distribuțiile cu eliberare continuă (Arch, openSUSE Tumbleweed, CachyOS etc.)! 🐧

#COSMICDesktop #System76 #Rust #PopOS #Linux #Wayland #OpenSource #SysAdmin #TechNews #DesktopEnvironment

Abusing Trusted Business Workflows: A Multi-Stage Phantom Stealer Campaign

Pulse ID: 6a619c7a925b067a28d63a21
Pulse Link: https://otx.alienvault.com/pulse/6a619c7a925b067a28d63a21
Pulse Author: Tr1sa111
Created: 2026-07-23 04:45:46

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #Rust #bot #Tr1sa111

Kaseya is hiring Staff Software Engineer

🔧 #csharp #javascript #rust #api #aws #azure #cicd #docker #gcp #kubernetes #terraform
🌎 Toronto, Ontario
⏰ Full-time
🏢 Kaseya

Job details https://jobsfordevelopers.com/jobs/staff-software-engineer-at-kaseya-com-may-15-2026-3c911c?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring

Abusing Trusted Business Workflows: A Multi-Stage Phantom Stealer Campaign

A sophisticated phishing campaign impersonates legitimate business entities including UPS and the Malaysian Inland Revenue Board to distribute Phantom Stealer v3.5.0. The attack begins with convincing emails containing compressed archives housing malicious JavaScript files. Once executed, the JavaScript launches obfuscated PowerShell scripts that operate entirely in memory, deploying multiple stages of encrypted and encoded payloads. The infection chain utilizes Base64 encoding, AES encryption, and XOR ciphering to conceal its activities. The final payload, Phantom Stealer, harvests credentials from browsers, cryptocurrency wallets, messaging applications, and system information before exfiltrating stolen data via SMTP over port 587 using STARTTLS encryption. The multi-layered approach significantly reduces on-disk footprint and employs reflective code loading and process injection into legitimate binaries to evade traditional security defenses.

Pulse ID: 6a60df1ccbee3728dd9c71e5
Pulse Link: https://otx.alienvault.com/pulse/6a60df1ccbee3728dd9c71e5
Pulse Author: AlienVault
Created: 2026-07-22 15:17:48

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberSecurity #Email #Encryption #InfoSec #Java #JavaScript #OTX #OpenThreatExchange #Phishing #PowerShell #RAT #Rust #TLS #bot #cryptocurrency #AlienVault

Announcing Topcoat: a framework for building full-stack reactive web apps with Rust https://lobste.rs/s/l8hiip #rust
https://tokio.rs/blog/2026-07-22-announcing-topcoat

Sniffnet v1.5.1 released

https://secburg.com/posts/sniffnet-151-released/

#Sniffnet #OpenSource #NetworkMonitoring #Rust #InfoSec